Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa
File: NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa (raw, json)
Hash identifier: R5ydMgwhbJwPLRXjezPN0UVvbP6FH9z33P63YOFbih4=
Subject key identifier: 36:16:91:FA:23:C5:15:C4:96:26:FB:54:69:1B:88:3F:E6:54:2C:D8
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDA819FA27C1D5A3338C98BFA5C86
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa
Signing time: Tue 02 Jan 2024 06:31:37 +0000
ROA not before: Tue 02 Jan 2024 06:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12507
IP address blocks: 46.151.144.0/23 maxlen: 23
46.151.144.0/21 maxlen: 21
195.49.206.0/23 maxlen: 23
195.49.200.0/21 maxlen: 21
195.49.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:da:81:9f:a2:7c:1d:5a:33:38:c9:8b:fa:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=361691fa23c515c49626fb54691b883fe6542cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:63:63:d3:95:5f:23:52:7d:ac:52:4d:26:
d1:db:4e:43:8c:ec:66:28:3c:71:64:ee:44:e9:aa:
2d:92:ca:c1:ee:a8:5d:64:03:af:d4:93:41:67:c6:
cf:e9:32:4c:8e:ce:24:bb:7e:1b:de:65:34:a6:ba:
df:ba:c9:a5:0a:6c:ca:1e:0e:6f:e6:c0:25:c6:dd:
31:6d:a7:e9:3c:6b:c3:6e:3f:85:1c:02:67:c0:b8:
f2:34:fc:71:79:44:12:36:02:a2:dc:67:e1:d0:f2:
e8:a7:26:5c:d3:e8:bf:b6:11:2f:2e:72:ab:b5:8f:
e0:4d:64:34:e5:db:a0:84:71:d3:1c:78:84:39:1c:
71:c1:ed:2d:d1:a7:69:9f:79:f5:c4:4c:65:ef:d9:
9b:14:9f:d7:f6:3e:f0:75:2c:80:d2:c0:62:4c:a2:
ff:4d:20:35:7e:9a:60:e4:8a:4c:db:05:af:a8:17:
9b:bd:8a:33:83:ca:05:64:ef:53:10:13:42:b2:c8:
94:21:a5:36:47:8f:26:6e:fd:e5:a0:98:28:3c:3b:
ff:e5:f5:0c:80:dd:2c:10:69:97:78:34:de:93:74:
7c:9a:cb:14:93:29:33:88:60:f3:fc:29:95:9a:cc:
8d:9c:69:ed:77:57:fc:2f:e2:aa:61:bd:13:83:fd:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:91:FA:23:C5:15:C4:96:26:FB:54:69:1B:88:3F:E6:54:2C:D8
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/NhaR-iPFFcSWJvtUaRuIP-ZULNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.144.0/21
195.49.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:d7:e6:13:ca:3a:34:cf:a7:39:7e:af:9e:51:e5:1f:41:7c:
e7:0b:19:d0:fc:dc:35:02:c2:c7:ef:28:c0:49:6d:28:c2:46:
9d:ff:11:86:11:98:75:a0:9f:71:df:4c:59:a3:64:d0:c1:46:
40:58:e2:26:7f:0f:29:c6:a0:08:9a:a1:16:7a:a2:7f:21:64:
40:7d:6c:67:18:21:e5:c8:fa:23:c7:4c:ef:dd:32:6b:2d:cd:
c0:51:c6:ec:2e:d7:65:85:4f:5b:0f:4d:0a:38:13:b4:5d:fb:
b6:9f:c7:01:da:e0:d1:f2:0e:1c:04:d5:a9:57:1b:ab:7f:44:
29:ae:c0:94:32:46:1f:00:f3:b1:3e:1b:58:72:84:21:4e:7b:
cb:1f:51:85:e2:47:b2:b9:8b:57:86:94:13:15:c2:94:09:ff:
f8:c1:9f:15:18:d3:af:52:fe:6b:fd:67:6f:3d:1d:54:40:cc:
db:d3:40:d0:ac:77:22:f0:8f:1d:ad:57:f5:ac:86:40:a1:c2:
ff:8f:9f:22:a6:f5:08:a9:3b:24:6a:ab:80:97:3a:a9:23:cb:
a4:19:fb:23:43:21:7d:9c:29:58:ab:98:ef:18:89:c0:2d:5d:
92:af:7a:6e:4a:60:7b:7d:b9:3f:12:ad:b9:2c:8c:ab:3d:5a:
70:27:0d:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI3tqBn6J8HVozOMmL+lyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjQwMTAyMDYzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjE2OTFmYTIzYzUxNWM0OTYyNmZiNTQ2OTFiODgzZmU2NTQyY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v5jY9OVXyNSfaxSTSbR205DjOxm
KDxxZO5E6aotksrB7qhdZAOv1JNBZ8bP6TJMjs4ku34b3mU0prrfusmlCmzKHg5v
5sAlxt0xbafpPGvDbj+FHAJnwLjyNPxxeUQSNgKi3Gfh0PLopyZc0+i/thEvLnKr
tY/gTWQ05dughHHTHHiEORxxwe0t0adpn3n1xExl79mbFJ/X9j7wdSyA0sBiTKL/
TSA1fppg5IpM2wWvqBebvYozg8oFZO9TEBNCssiUIaU2R48mbv3loJgoPDv/5fUM
gN0sEGmXeDTek3R8mssUkykziGDz/CmVmsyNnGntd1f8L+KqYb0Tg/1U8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDYWkfojxRXElib7VGkbiD/mVCzYMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvTmhhUi1pUEZGY1NXSnZ0VWFSdUlQLVpVTE5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLpeQAwQD
wzHIMA0GCSqGSIb3DQEBCwUAA4IBAQCN1+YTyjo0z6c5fq+eUeUfQXznCxnQ/Nw1
AsLH7yjASW0owkad/xGGEZh1oJ9x30xZo2TQwUZAWOImfw8pxqAImqEWeqJ/IWRA
fWxnGCHlyPojx0zv3TJrLc3AUcbsLtdlhU9bD00KOBO0Xfu2n8cB2uDR8g4cBNWp
Vxurf0QprsCUMkYfAPOxPhtYcoQhTnvLH1GF4keyuYtXhpQTFcKUCf/4wZ8VGNOv
Uv5r/WdvPR1UQMzb00DQrHci8I8drVf1rIZAocL/j58ipvUIqTskaquAlzqpI8uk
GfsjQyF9nClYq5jvGInALV2Sr3puSmB7fbk/Eq25LIyrPVpwJw30
-----END CERTIFICATE-----
Generated at Tue Jun 25 21:38:15 2024 by rpki-client on console-fra.rpki-client.org